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DETAILED ACTION 

Claims 1-7, and 9-24 are pending. 

Below, Examiner has pointed out particular references contained in the prior 
art(s) of record in the body of this action for the convenience of the applicant. Although 
the specified citations are representative of the teachings in the art and are applied to 
the specific limitations within the individual claims, other passages and figures may 
apply as well. Applicant should consider the entire prior art as applicable as to the 
limitations of the claims. It is respectfully requested from the applicant, in preparing the 
response, to consider fully each reference in its entirety as potentially teaching all or 
part of the claimed invention, as well as the context of the passage as taught by the 
prior arts or disclosed by the examiner. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

1. Claims 1-7 and 10-14 and 22-24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Islam (US 2003/0035430) in view of Vairavan (US 2002/0083344) in 
further view of Jain et al. (US 6,324,575), hereafter "Jain". 

Considering Claims 1 and 24, Islam discloses analyzing data content received at 
a local area network from an external communications network; receiving unanalyzed 
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content at a local area network ([0033] lines 4-6, [0089] lines 20-24, Fig. 1); passing the 
unanalyzed content to a switch in the local area network ([0033] lines 4-6, [0089] lines 
20-24, Figure 1- item 106); analyzing the unanalyzed content at the switch and 
generating analyzed data ([0033] lines 4-6, [0089] lines 6-24, Fig. 1- item 102 and item 
104); and routing the analyzed data to a device in the local area network in 
communication with the switch (Fig. 1- item 108, [0034] having Ethernet ports gives you 
a connection to a device in the network, [0089] lines 21-24), wherein the switch 
comprises a plurality of ports ([0021] lines 1-9) and wherein analyzing the unanalyzed 
data content at the switch comprises the switch scanning the plurality of ports ([0012] 
lines 1-11, [0038] lines 1-8). 

Islam does not explicitly disclose analyzing the unanalyzed data content at the switch 
comprises applying a content analysis algorithm to each of the plurality of ports. 
Vairavan does explicitly disclose the switch comprises a plurality of ports (Fig. 1- item 
155(a-f), [0048] lines 1-7), analyzing the unanalyzed data content at the switch 
comprises applying a content analysis algorithm to each of the plurality of ports 
(Vairavan- [0055] lines 1-3, [0067] lines 3-7, [0070] lines 1-7). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the teachings of Islam by applying a content analysis 
algorithm to each of the plurality of ports as taught by Vairavan in order to provide an 
easily upgradeable networking device capable of interfacing with different types of 
networks while still providing high performance networking functionalities such as 
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protocol conversion, security maintenance, and inter/intra-network management within 
an enterprise environment (Vairavan- [0016]). 

The combination does not explicitly disclose wherein applying the content analysis 
algorithm comprises applying a first content analysis algorithm to a first port of the 
plurality of ports and applying a second content analysis algorithm to a second port of 
the plurality of ports, wherein the second content analysis algorithm is different than the 
first content analysis algorithm. 

Jain discloses applying the content analysis algorithm comprises applying a first content 
analysis algorithm to a first port of the plurality of ports and applying a second content 
analysis algorithm to a second port of the plurality of ports, wherein the second content 
analysis algorithm is different than the first content analysis algorithm (column 6- lines 
37-49, column 8- lines 30-43). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination by applying a first content analysis algorithm 
to a first port of the plurality of ports and applying a second content analysis algorithm to 
a second port of the plurality of ports, wherein the second content analysis algorithm is 
different than the first content analysis algorithm as taught by Jain to ensure that all 
desired packets are delivered correctly and to eliminate the need for expensive, time- 
consuming, and error-prone network administrator intervention (Jain- column 2- lines 
46-61). 

Considering Claim 12, Islam discloses a method of managing content analysis 
for a LAN from a managed service provider network (abstract, [0032] lines 6-10); 
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comprising a switch in communication with an external communications network and at 
least one device in connection with the switch ([0033] lines 4-6, [0034] lines 10-13); 
establishing a communication link between the switch of the LAN and the managed 
server provider network via the external communications network ([0016], [0032] lines 
6-10), to cause the switch to scan and apply a first content analysis function to a first 
selected port of the plurality of ports ([0012] lines 1-11, [0038] lines 1-8). 
Islam does not explicitly disclose transmitting port configuration instructions from the 
managed service provider network to the switch of the LAN, the port configuration 
instructions comprising instructions to configure a plurality of ports at the switch to 
implement at least two content analysis functions. Islam does suggest a secure 
protocol between the programmable network device and a separate server for loading 
configuration information ([0068] lines 4-7). 

Vairavan does explicitly disclose transporting port configuration instructions from the 
managed service provider network to the switch of the LAN ([0048] lines 1-7), the port 
configuration instructions comprising instructions to configure at least one port at the 
switch to implement at least two content analysis function ([0048], [0055] lines 1-3, 
[0067] lines 3-7, [0070] lines 1-7). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the teachings of Islam by transporting port configuration 
instructions from the managed service provider to the switch as taught by Vairavan for 
the benefit of remote access to the configuration of the device. Remote access would 
allow for administrators to alter the operating parameters of individual management 
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modules via the network to affect performance gains or modify existing operating 
parameters (Vairavan- abstract). 

The combination does not explicitly disclose and scan and apply a second content 
analysis function to a second selected port of the plurality of ports, wherein the second 
content analysis function is different than the first content analysis function. 
Jain discloses to scan and apply a second content analysis function to a second 
selected port of the plurality of ports, wherein the second content analysis function is 
different than the first content analysis function (column 6- lines 37-49, column 8- lines 
30-43). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination by applying a first content analysis algorithm 
to a first port of the plurality of ports and applying a second content analysis algorithm to 
a second port of the plurality of ports, wherein the second content analysis algorithm is 
different than the first content analysis algorithm as taught by Jain to ensure that all 
desired packets are delivered correctly and to eliminate the need for expensive, time- 
consuming, and error-prone network administrator intervention (Jain- column 2- lines 
46-61). 

Considering Claims 22, 23, and 24, Islam discloses analyzing data content 
received at a local area network from an external communications network; receiving at 
a local area network unanalyzed data content in a data field of a data packet formatted 
according to a communications protocol ([0033] lines 4-6, [0089] lines 20-24, Fig. 1); 
passing the unanalyzed content to a switch in the local area network ([0033] lines 4-6, 
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[0089] lines 20-24, Figure 1- item 106); analyzing the unanalyzed content at the switch 
and generating analyzed data ([0033] lines 4-6, [0089] lines 6-24, Fig. 1- item 102 and 
item 104); and routing the analyzed data to a device in the local area network in 
communication with the switch (Fig. 1- item 108, [0034] having Ethernet ports gives you 
a connection to a device in the network, [0089] lines 21-24), wherein the switch 
comprises a plurality of ports ([0021] lines 1-9) and wherein analyzing the unanalyzed 
data content at the switch comprises the switch scanning the plurality of ports ([0012] 
lines 1-11, [0038] lines 1-8). 

Islam does not explicitly disclose analyzing the unanalyzed data content at the switch 
comprises applying a content analysis algorithm to each of the plurality of ports. 
Vairavan does explicitly disclose the switch comprises a plurality of ports (Fig. 1- item 
155(a-f), [0048] lines 1-7), analyzing the unanalyzed data content at the switch 
comprises applying a content analysis algorithm to each of the plurality of ports 
(Vairavan- [0055] lines 1-3, [0067] lines 3-7, [0070] lines 1-7). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the teachings of Islam by applying a content analysis 
algorithm to each of the plurality of ports as taught by Vairavan in order to provide an 
easily upgradeable networking device capable of interfacing with different types of 
networks while still providing high performance networking functionalities such as 
protocol conversion, security maintenance, and inter/intra-network management within 
an enterprise environment (Vairavan- [0016]). 
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The combination does not explicitly disclose wherein applying the content analysis 
algorithm comprises applying a first content analysis algorithm to a first port of the 
plurality of ports and applying a second content analysis algorithm to a second port of 
the plurality of ports, wherein the second content analysis algorithm is different than the 
first content analysis algorithm. 

Jain discloses applying the content analysis algorithm comprises applying a first content 
analysis algorithm to a first port of the plurality of ports and applying a second content 
analysis algorithm to a second port of the plurality of ports, wherein the second content 
analysis algorithm is different than the first content analysis algorithm (column 6- lines 
37-49, column 8- lines 30-43). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination by applying a first content analysis algorithm 
to a first port of the plurality of ports and applying a second content analysis algorithm to 
a second port of the plurality of ports, wherein the second content analysis algorithm is 
different than the first content analysis algorithm as taught by Jain to ensure that all 
desired packets are delivered correctly and to eliminate the need for expensive, time- 
consuming, and error-prone network administrator intervention (Jain- column 2- lines 
46-61). 
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Considering Claims 2 and 3, the combination discloses applying a content 
filtering algorithm to the unanalyzed content upon ingress/egress at one of the plurality 
of ports (Islam- [0044] lines 1-9, performing functions on inbound/outbound packet flows 
reads on upon ingress/egress). 

Considering Claim 4, the combination discloses the unanalyzed content is 
formatted in data packets (Islam- [0037] lines 9-12, [0044] lines 3-5). 

Considering Claim 5, the combination discloses the switch applying the content 
analysis algorithm to each data packet of unanalyzed content (Vairavan- [0080]-[0085], 
[0131], Fig. 6A). 

Considering Claim 6, the combination discloses the switch executing an anti- 
virus algorithm (Vairavan- [0105]). 

Considering Claim 7, the combination discloses the switch executing an intrusion 
detection algorithm (Vairavan- [0090]). 

Considering Claim 10, the combination discloses receiving a content analysis 
software update at the switch from a managed service provider network via the external 
communications network (Islam- abstract, [0014], [0016], [0037] lines 6-9, Vairavan- 
[0026] lines 4-11, [0105] lines 6-8). 

Considering Claims 11 and 13, the combination discloses applying the content 
analysis software update to each of the plurality of ports at the switch (Islam- [0014], 
[0021] lines 1-9), configured to implement content analysis software contained in the 
content analysis software update (Islam- abstract, [0014], [0016], [0037] lines 6-9, 
Vairavan- [0105]). 
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Considering Claim 14, the combination discloses monitoring content analysis 
activity at the switch from the managed service provider network (Islam- [0020] lines 8- 
11). 

2. Claim 9 is rejected under 35 U.S.C. 103(a) as being unpatentable over Islam, 
Vairavan, and Jain in view of Wilson et al. (US Pat. 4,292,465) herein after "Wilson" in 
further view of Jain et al. (US 6,324,575), hereafter "Jain". 

Considering Claim 9, the combination does not explicitly disclose that each of 
the plurality of ports comprises a dedicated processor and each dedicated processor for 
a respective port independently applies a separate content analysis algorithm to 
unanalyzed content at the port, whereby each of the plurality of ports analyzes content 
with its respective processor. 

Wilson discloses that each of the plurality of ports comprises a dedicated processor and 
each dedicated processor for a respective port independently applies a separate 
content analysis algorithm to unanalyzed content at the port, whereby each of the 
plurality of ports analyzes content with its respective processor (column 22- lines 27-32, 
column 23- EOM is set when final message byte has been read from the data port, 
column 29- lines 16-24, each processor executing its respective function reads on a 
separate content analysis algorithm being applied at each port). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination by a dedicated processor for each 
respective port designed to perform its own function for the benefit of distributing the 
processing requirements of the exchange to different levels of processor control to 
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optimize the processing requirements at the levels where it is needed (Wilson- column 
2- lines 52-57). 

3. Claim 15 is rejected under 35 U.S.C. 103(a) as being unpatentable over Islam in 
view of Webb et al. (US 2002/0120741), herein after "Webb" in further view of Jain et 
al. (US 6,324,575), hereafter "Jain".. 

Considering Claim 15, Islam discloses providing content analysis to a plurality of 
networks ([0016] lines 1-8); establishing a communication link between a switch in each 
of a plurality of subscriber networks and an application management appliance of a 
managed service provider network via an external communications network ([0016], 
[0032] lines 6-1 0, Fig. 1 ); transmitting one of instructions and update information for a 
content analysis application from the application management appliance at the network 
switch to the switch in each of the plurality of subscriber networks ([0014], [0016], [0037] 
lines 6-9); and receiving performance metrics of the content analysis application from 
each of the plurality of subscriber networks ([0037] lines 14-19, [0038 lines 5-8, 
[0061][0062]), wherein the switch in each of the plurality of subscriber networks 
comprises a plurality a plurality of ports ([0021] lines 1-9). 

Islam does not explicitly disclose receiving metrics comprises receiving performance 
metrics for each of the plurality of ports in substantially real time. Islam does suggest 
periodically checking the statistics for each port ([0038] lines 5-8). 
Webb does explicitly disclose receiving metrics comprises receiving performance 
metrics for each of the plurality of ports in substantially real time ([01 1 7] lines 3-8, 
[0118], [0255] lines 13-18, [0264]). 
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Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the teachings of Islam by receiving performance metrics in 
real time as taught by Webb for the benefit of increased performance and improved 
predictability of such computing systems in the performance of designated tasks across 
a wide range of loads (Webb- [0008] lines 5-9). 

The combination does not explicitly disclose the content analysis application comprising 
a first content analysis application and a second content analysis application, wherein 
the switch in each of the plurality of subscriber networks comprises a plurality of ports; 
applying the first content analysis application to a first port of the plurality of ports and 
applying the second content analysis application to a second port of the plurality of 
ports, wherein the second content analysis application is different than the first content 
analysis application. 

Jain discloses the content analysis application comprising a first content analysis 
application and a second content analysis application, wherein the switch in each of the 
plurality of subscriber networks comprises a plurality of ports; applying the first content 
analysis application to a first port of the plurality of ports and applying the second 
content analysis application to a second port of the plurality of ports, wherein the 
second content analysis application is different than the first content analysis application 
(column 6- lines 37-49, column 8- lines 30-43). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination by applying a first content analysis algorithm 
to a first port of the plurality of ports and applying a second content analysis algorithm to 
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a second port of the plurality of ports, wherein the second content analysis algorithm is 
different than the first content analysis algorithm as taught by Jain to ensure that all 
desired packets are delivered correctly and to eliminate the need for expensive, time- 
consuming, and error-prone network administrator intervention (Jain- column 2- lines 
46-61). 

4. Claims 16-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Webb et al. (US 2002/0120741), herein after "Webb ", and Vairavan in further view of 
Van Home et al. (US 5,987,430), hereafter "Van Home" in further view of Jain et al. 
(US 6,324,575), hereafter "Jain". 

Considering Claim 16, Webb discloses a LAN having content analysis 
capabilities (Fig. 1D 1080- a switch fabric, [0085] lines 6-10, [0155], [0157] lines 3-6), a 
processor in communication with the interface connection ([0163], Fig. 1D- Pentium III, 
POWER PC, item 1032); a memory in communication with the processor (Fig. 1D- 
SDRAM); an application buffer in communication with the processor and the memory 
(Fig. 1 D- item 1 032 Buf Mgt Unit); the application buffer contains logic operative on the 
processor to analyze a content of information passing between the external device and 
the port ([01 61 ], [0371 ], [0377] lines 1 -5, Fig. 1 1 - item 21 22); a communication bus in 
communication with each of the plurality of ports, the communication bus adapted to 
carry information between the plurality of ports ([0078], [0160], [0189], Fig. 1 D). 
Webb does not explicitly disclose a plurality of ports each configured for communication 
with a respective external device; an interface connection adapted for connecting with a 
communication line of an external device. 
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Vairavan does disclose a plurality of ports each configured for communication with a 
respective external device ([0048], Fig. 1- item 105); an interface connection adapted 
for connecting with a communication line of an external device ([0048], [0069]), the 
switch is configured to analyze the content of information passing through each of the 
plurality of ports (Vairavan- [0067] lines 3-7, [0070] lines 1-7). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to combine the teachings of Webb a plurality of ports each explicitly 
configured for communication with an external device and an interface connection 
adapted for connecting with a communication line of an external device as taught by 
Vairavan in order to provide an easily upgradeable networking device capable of 
interfacing with different types of networks while still providing high performance 
networking functionalities such as protocol conversion, security maintenance, and 
inter/intra-network management within an enterprise environment (Vairavan- [0016]). 
The combination of Webb and Vairavan does not explicitly disclose a billing server; the 
billing server is operable to track charges for content analysis services and bill on a per 
port basis. 

Van Home discloses a billing server; the billing server is operable to track charges for 
content analysis services and bill on a per port basis (column 16- lines 54-67, column 
17- lines 1-27). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination of Webb and Vairavan by the billing 
capabilities as taught by Van Home for the benefit of associating an access port with a 
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particular room, which can promote convenience in billing ( Van Home- column 17- lines 
5-8). 

The combination does not explicitly disclose a first application buffer contains logic for 
applying a first content analysis algorithm to a first port of the plurality of ports and a 
second application buffer contains logic for applying a second content analysis 
algorithm to a second port of the plurality of ports, wherein the second content analysis 
algorithm is different than the first content analysis algorithm. 

Jain discloses wherein a first application buffer contains logic for applying a first content 
analysis algorithm to a first port of the plurality of ports and a second application buffer 
contains logic for applying a second content analysis algorithm to a second port of the 
plurality of ports, wherein the second content analysis algorithm is different than the first 
content analysis algorithm (column 6- lines 37-49, column 8- lines 30-43). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of invention to modify the combination by applying a first content analysis algorithm 
to a first port of the plurality of ports and applying a second content analysis algorithm to 
a second port of the plurality of ports, wherein the second content analysis algorithm is 
different than the first content analysis algorithm as taught by Jain to ensure that all 
desired packets are delivered correctly and to eliminate the need for expensive, time- 
consuming, and error-prone network administrator intervention (Jain- column 2- lines 
46-61). 

Considering Claim 17, the combination discloses an application buffer 
administrative interface in communication with the communication bus (Webb- [0163]- 
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[0164], Fig. 1 D- item 1032 and item 1080); the application buffer administrative 
interface comprises content analysis resources accessible by the application buffer for 
each port (Webb- [0163], [0183], [0192]). 

Considering Claim 18, the combination discloses one of the application buffers 
comprises anti-virus filtering logic (Vairavan- [0105]). 

Considering Claim 19, the combination discloses one of the application buffers 
comprises network security logic (Webb- [0085] lines 6-10, Vaiaravan- [0090]). 

Considering Claim 20, the combination discloses one of the application buffers 
comprises content filtering logic (Webb- [0409] lines 1-16, Vairavan- [0090]). 

Considering Claim 21, the combination discloses the application buffer 
administrative interface comprises anti-virus definitions adapted for use by anti-virus 
logic stored on an application buffer at a port (Vairavan- [0105], it is inherent that anti- 
virus software must use anti-virus definitions). 

Response to Arguments 

Applicant's arguments filed 07/25/2008 have been fully considered but they are 
not persuasive. 

Regarding Claims 1, 9, 12, 15, 16, 22, and 24, applicant's arguments have been 
fully considered but are not persuasive. With respect to applicants' argument that the 
combination fails to teach wherein applying the content analysis algorithm comprises 
applying a first content analysis algorithm to a first port of the plurality of ports and 
applying a second content analysis algorithm to a second port of the plurality of ports, 
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wherein the second content analysis algorithm is different from the first content analysis 
algorithm. Applicant is directed to Jain- column 2- lines 46-61 , column 6- lines 37-49, 
column 8- lines 30-43. Jain discloses selecting at least two separate filtering options for 
a plurality of ports. The switch intelligently selects the optimal multicast filter mode for 
each port without requiring any error-prone network administration intervention. 
Therefore, the combination teaches applying at least two separate content analysis 
algorithms (i.e. the optimal multicast filter) at a plurality of ports. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Randal D. Moran whose telephone number is 571-270- 
1255. The examiner can normally be reached on M-F: 7:00 - 4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/R. D. M./ 

Examiner, Art Unit 2435 
3/23/2009 



/KIMYEN VU/ 

Supervisory Patent Examiner, Art Unit 2435 



